Chaos Fault Injection

Inject controlled failure modes (LLM timeout, tool deny, trust suppress) to verify governance cascades. Engagement is operator-driven, sampled, role-allowlisted, and auto-expires.

State is in-memory; host restart auto-disengages. Hard cap on session duration: 4 hours.